GO-2024-3036: cortex establishes TLS connections with `InsecureSkipVerify` set to `true` in github.com/cortexproject/cortex

querysharding

package

v1.20.0 Latest Latest Go to latest Published: Nov 10, 2025 License: Apache-2.0 Imports: 8 Imported by: 0

Details

View Source

const (
	CortexShardByLabel = "__CORTEX_SHARD_BY__"
)

View Source

var (
	Buffers = sync.Pool{New: func() any {
		b := make([]byte, 0, 100)
		return &b
	}}
)

func ExtractShardingInfo(matchers []*labels.Matcher) ([]*labels.Matcher, *storepb.ShardInfo, error)

func ExtractShardingMatchers(matchers []*labels.Matcher) ([]*labels.Matcher, *storepb.ShardMatcher, error)

func InjectShardingInfo(query string, shardInfo *storepb.ShardInfo) (string, error)

func NewDisableBinaryExpressionAnalyzer(analyzer querysharding.Analyzer) *disableBinaryExpressionAnalyzer

NewDisableBinaryExpressionAnalyzer is a wrapper around the analyzer that disables binary expressions.

This section is empty.